Traffic Trace Info
DumpFile: 200401191400.dump
FileSize: 339.04MB
Id: 200401191400
StartTime: Mon Jan 19 14:00:00 2004
EndTime: Mon Jan 19 14:15:00 2004
TotalTime: 900.44 seconds
TotalCapSize: 264.46MB CapLen: 96 bytes
# of packets: 4887501 (2063.32MB)
AvgRate: 19.22Mbps stddev:0.65M
IP flow (unique src/dst pair) Information
# of flows: 588788 (avg. 8.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 2.2% 1.8% 1.7% 1.6% 1.6% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 408886
Top 10 bandwidth usage (bytes/total in %):
9.5% 8.5% 8.5% 3.9% 3.6% 2.9% 2.8% 2.6% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200401191400.pktlen.png)
detailed numbers
[ 16- 31]: 10618
[ 32- 63]: 2179558
[ 64- 127]: 918993
[ 128- 255]: 123286
[ 256- 511]: 212366
[ 512- 1023]: 341827
[ 1024- 2047]: 1100853
Protocol Breakdown
![[protocol breakdown chart]](200401191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 4887501 (100.00%) 2163549613 (100.00%) 442.67
ip 4874646 ( 99.74%) 2163168533 ( 99.98%) 443.76
tcp 4440413 ( 90.85%) 2067242635 ( 95.55%) 465.55
http(s) 1281416 ( 26.22%) 1014246309 ( 46.88%) 791.50
http(c) 542972 ( 11.11%) 61433281 ( 2.84%) 113.14
squid 17916 ( 0.37%) 1575145 ( 0.07%) 87.92
smtp 99432 ( 2.03%) 33101762 ( 1.53%) 332.91
nntp 121845 ( 2.49%) 182881831 ( 8.45%) 1500.94
ftp 52282 ( 1.07%) 9645185 ( 0.45%) 184.48
pop3 3952 ( 0.08%) 574589 ( 0.03%) 145.39
imap 1227 ( 0.03%) 572738 ( 0.03%) 466.78
telnet 1652 ( 0.03%) 293193 ( 0.01%) 177.48
ssh 269 ( 0.01%) 62174 ( 0.00%) 231.13
dns 124 ( 0.00%) 9430 ( 0.00%) 76.05
bgp 171 ( 0.00%) 46853 ( 0.00%) 273.99
napster 14397 ( 0.29%) 1789301 ( 0.08%) 124.28
realaud 23 ( 0.00%) 1892 ( 0.00%) 82.26
rtsp 10121 ( 0.21%) 3333742 ( 0.15%) 329.39
icecast 5537 ( 0.11%) 641236 ( 0.03%) 115.81
other 2286785 ( 46.79%) 757021195 ( 34.99%) 331.04
udp 263443 ( 5.39%) 80014912 ( 3.70%) 303.73
dns 118110 ( 2.42%) 14989459 ( 0.69%) 126.91
realaud 14244 ( 0.29%) 7887604 ( 0.36%) 553.75
quake 3 ( 0.00%) 180 ( 0.00%) 60.00
other 130726 ( 2.67%) 56980488 ( 2.63%) 435.88
icmp 163966 ( 3.35%) 15619000 ( 0.72%) 95.26
ip6 337 ( 0.01%) 71005 ( 0.00%) 210.70
other 6487 ( 0.13%) 220981 ( 0.01%) 34.07
frag 16298 ( 0.33%) 18009877 ( 0.83%) 1105.04
tcpdump file: 200401191400.dump.gz (140.05 MB)